Episode 162 - The Do Not Google It Episode

<p><strong>This week in InfoSec (05:54)</strong></p><p>With content liberated from the “today in infosec” twitter account and further afield</p><p>18th July 2011: Microsoft Hotmail announced that it would be banning very common passwords such as "123456" and "ilovecats".  </p><p><a href="https://twitter.com/todayininfosec/status/1416957326205100035">https://twitter.com/todayininfosec/status/1416957326205100035</a>  </p><p>27th July 1990: The case of United States v. Riggs was decided. Robert J. Riggs (Prophet) had stolen the E911 file from BellSouth, then co-defendant Craig Neidorf (Knight Lightning) had published it in Phrack. The file was neither valuable nor confidential. </p><p><a href="https://twitter.com/todayininfosec/status/1287768573310533633">https://twitter.com/todayininfosec/status/1287768573310533633</a></p><p> </p><p><strong>Rant of the Week (16:59)</strong></p><p><a href="https://www.theregister.com/2023/07/21/virustotal_data_exposure_apology/">VirusTotal: We're sorry someone fat-fingered and exposed 5,600 users</a></p><p>VirusTotal today issued a mea culpa, saying a blunder earlier this week by one of its staff exposed information belonging to 5,600 customers, including the email addresses of US Cyber Command, FBI, and NSA employees.</p><p>The unintentional leak was due to the <a href="https://www.theregister.com/2016/08/03/humans_always_trump_antiphishing_schemes/">layer-eight</a> problem; human error. On June 29, an employee accidentally uploaded a .csv file of customer info to VirusTotal itself, said Emiliano Martinez, tech lead of the Google-owned malware analysis site.</p><p>"This CSV file contained limited information of our Premium account customers, specifically the names of companies, the associated VirusTotal group names, and the email addresses of group administrators," Martinez <a href="https://blog.virustotal.com/2023/07/apology-and-update-on-recent-accidental.html">wrote</a> in a Friday disclosure.</p><p>"We removed the file, which was only accessible to partners and corporate client